CVE-2022-33282 Integer overflow to buffer overflow in Automotive Multimedia
An integer overflow leading to buffer overflow in Qualcomm Snapdragon automotive multimedia allows attackers to execute arbitrary code via IOCTL calls.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-33282?
CVE-2022-33282 is a high-severity vulnerability in Qualcomm Msm8996au Firmware, published on 4 Apr 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback.
Which versions are affected by CVE-2022-33282?
It affects 20 products.
Products include Qualcomm Msm8996au Firmware, Qualcomm Qam8295p Firmware, Qualcomm Qca6574a Firmware, Qualcomm Qca6574au Firmware, Qualcomm Qca6584au Firmware, Qualcomm Qca6595 Firmware and 14 more.
How do I fix CVE-2022-33282?
No fix has been published for CVE-2022-33282 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-33282 being exploited?
There is no known exploitation of CVE-2022-33282 in the wild and no public exploit code.
Other vulnerabilities in Qualcomm Msm8996au Firmware
- CVE-2017-18318 Security feature bypass in Snapdragon Automobile, Snapdragon Mobile
- CVE-2024-45555 Integer Overflow to Buffer Overflow in Automotive OS Platform
- CVE-2022-25680 Memory corruption in Snapdragon Auto
- CVE-2024-53030 Improper Input Validation in Automotive OS Platform
- CVE-2019-2277 Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
Sources
Also known as GHSA-fc8j-8whg-6jmp.